test(ui): isolate the fixture port so parallel runs stop colliding

The self-hosted CI runner packs several jobs onto the shared host network (capacity 4). The UI suite pinned the fixture server to 127.0.0.1:3107 and set reuseExistingServer: true, so overlapping runs fought over the bind: one job won it, and every browser in the other got "connection refused" on all four projects. Pass one random high port per run through the environment (shared by the main process and its worker) and only reuse an existing server outside CI. Verified with the full ui suite: 150 passed, 2 skipped.
chore(deps): dedupe the lockfile to the newest transitive versions
2026-10-19 20:16:28 +02:00 · 2026-10-19 19:55:41 +02:00 · 2026-10-19 19:52:08 +02:00 · 2026-10-19 19:00:07 +02:00
8 changed files with 246 additions and 193 deletions
@@ -18,7 +18,7 @@ Features a premium animated homepage (typewriter hero, floating orbs, scroll cou
 | Docker          | 24+            | Optional — for containerized deployment  |
 | Valkey          | 8.x+           | Optional — caching, rate limiting, SSE   |

-Core stack: **Next.js 16.4.1** (App Router) · **React 19.3.1** · **TypeScript 7.0.2** · **Drizzle ORM 0.45.4** · **Zod 4.6.7** · **Vitest 5.0.4** · **Biome 2.5.15** · **Playwright 1.64.1**.
+Core stack: **Next.js 16.4.2** (App Router) · **React 19.3.1** · **TypeScript 7.0.2** · **Drizzle ORM 0.45.4** · **Zod 4.6.7** · **Vitest 5.0.5** · **Biome 2.5.15** · **Playwright 1.64.1**.

 > Builds must run through the `pnpm` scripts. This host has no swap and
 > `vm.overcommit_memory=0`, so an uncapped `next build` gets OOM-killed by the
@@ -965,11 +965,13 @@ there are two fixed slots, and each release lands in the idle one:
 | A | 3002 | `epicnext-cms-app` |
 | B | 3003 | `epicnext-cms-green` |

-`docker-compose.yml` defines both services (`cms`, and `cms-green` behind the
-`green` profile) from one shared YAML anchor so they cannot drift apart. Note
-that the CI deploy path deliberately uses `docker run` rather than compose, so
-the resource limits are declared in **both** places — limits that only existed
-in compose would never apply to a real release.
+`docker-compose.yml` defines a single `cms` service (the blue slot on 3002)
+behind the `cms` profile, so a bare `docker compose up -d` never starts it. The
+green slot (`epicnext-cms-green`, port 3003) only ever exists as a `docker run`
+container created by the CI deploy; compose does not define it, so the two paths
+cannot drift apart. Note that the CI deploy path deliberately uses `docker run`
+rather than compose, so the resource limits are declared in **both** places —
+limits that only existed in compose would never apply to a real release.

 ### Compose on a CI host

@@ -977,9 +979,14 @@ Compose and CI both want port 3002, so only one of them can own a host. A stray
 compose replica (`docker compose up`, or the daily `scripts/docker-update.sh`
 cron) parked an `epicnext-cms` container on the blue slot while nginx served the
 green slot, and every later release stopped on "Port 3002 is already in use" —
-after the build, the migrations and the browser gate. Two guards now prevent
+after the build, the migrations and the browser gate. Three guards now prevent
 that:

+- The `cms` service sits behind the `cms` profile, so a bare `docker compose up
+  -d` starts only byparr and can never claim 3002. The service starts only when
+  it is named explicitly (`docker compose up -d cms`), which is what the
+  installer/updater already do; Compose enables the profile automatically for an
+  explicitly named service.
 - `scripts/docker-update.sh` refuses to run on a CI host. It used to test only
  `epicnext-cms-app`, but after a cutover to the green slot that container is
  stopped and deleted, so the guard stopped firing while the host stayed
@@ -1,5 +1,20 @@
 # ─────────────────────────────────────────────────────────────────────────────
-# Next.js CMS — blue/green
+# Next.js CMS — single slot on port 3002
+#
+# ── Eigenaar van poort 3002 ─────────────────────────────────────────────────
+# Deze repo kent twee deploy-paden die allebei op poort 3002 willen:
+#   * `scripts/ci-deploy.sh` (blue/green, docker run) — de eigenaar op een
+#     CI-host. Elke push naar main bouwt daar een nieuwe image, draait de
+#     migrations en zet nginx pas om na health + e2e + imaging.
+#   * deze compose-`cms`-service — bedoeld voor een LOSSE host zonder CI.
+#
+# Ze kunnen niet naast elkaar draaien: wie op 3002 zit, blokkeert de ander met
+# `EADDRINUSE`. Daarom staat `cms` achter een profile. Een bloot
+# `docker compose up -d` start dus alleen byparr en kan nooit de live CI-release
+# van de site drukken. De service start alleen als je hem expliciet noemt
+# (`docker compose up -d cms`, `docker compose build cms`, ...): Compose schakelt
+# het profile van een expliciet genoemde service vanzelf in. Op een CI-host wil
+# je dat dus juist NOOIT doen.
 # ─────────────────────────────────────────────────────────────────────────────
 x-cms: &cms
  image: epicnext-cms:${CMS_RELEASE:-local}
@@ -14,8 +29,8 @@ x-cms: &cms
    dockerfile: Dockerfile
    args:
      NEXT_DEPLOYMENT_ID: ${CMS_RELEASE:-unknown}
-  # Runtime host networking IS required: blue/green needs per-release host ports
-  # (3002/3003) and nginx reaches the slot over 127.0.0.1.
+  # Runtime host networking IS required: nginx reaches the CMS over 127.0.0.1
+  # on the single port that is actually served (3002).
  network_mode: host
  stop_grace_period: 15s
  restart: unless-stopped
@@ -28,8 +43,8 @@ x-cms: &cms
    - /var/www/Gamedata:/var/www/Gamedata

  # ── Resource limits ──
-  mem_limit: 6g
-  memswap_limit: 7g
+  mem_limit: 2g
+  memswap_limit: 2g
  cpus: 2.0
  pids_limit: 512

@@ -43,19 +58,13 @@ x-cms: &cms
 services:
  cms:
    <<: *cms
+    # Alleen starten als je deze host bewust compose-only beheert.
+    profiles: ["cms"]
    container_name: epicnext-cms
    environment:
      - HOSTNAME=0.0.0.0
      - PORT=3002

-  cms-green:
-    <<: *cms
-    container_name: epicnext-cms-green
-    profiles: ["green"]
-    environment:
-      - HOSTNAME=0.0.0.0
-      - PORT=3003
-
  byparr:
    image: ghcr.io/thephaseless/byparr:latest
    container_name: byparr
@@ -81,7 +81,7 @@ The direct template intentionally records the CDN/edge socket address when place

 ### Local verification and deployment boundary

-`pnpm exec vitest run --coverage.enabled=false scripts/proxy-config.test.mjs` runs the installed Docker Compose CLI against a disposable clone configuration, without contacting Docker Engine, building images or reading the real `.env`. It verifies selection through `.env`, loopback/port override precedence, the IPv4 healthcheck and preservation of mounts, release selection and host networking. It explicitly skips when Compose is unavailable. This is not a container-start or network-isolation test.
+`pnpm exec vitest run --coverage.enabled=false scripts/proxy-config.test.mjs` runs the installed Docker Compose CLI against a disposable clone configuration, without contacting Docker Engine, building images or reading the real `.env`. It verifies selection through `.env`, loopback/port override precedence, the IPv4 healthcheck and preservation of mounts, release selection and host networking. The `cms` service is behind the `cms` profile (so a bare `docker compose up -d` cannot claim port 3002 on a CI-managed host), so the test renders the configuration with `--profile cms`. It explicitly skips when Compose is unavailable. This is not a container-start or network-isolation test.

 `pnpm test:integration` additionally starts disposable Nginx containers from the actual templates, supplies a temporary test certificate, and sends real HTTPS requests with forged identity headers. It checks direct-mode replacement even with an inherited real-IP rule, rejection of untrusted peers, and acceptance through an explicitly trusted peer. This requires Docker Engine and the OpenSSL CLI and does not read deployment credentials. The templates must still pass `nginx -t` on the intended host after its hostname/certificate substitution, then the listener and trusted-header checks above; the disposable fixture cannot certify that host or its firewall.

@@ -56,9 +56,9 @@
 		"@dnd-kit/sortable": "10.0.0",
 		"@dnd-kit/utilities": "3.2.2",
 		"@formatjs/icu-messageformat-parser": "3.5.21",
-		"@hookform/resolvers": "5.9.1",
-		"@tanstack/react-query": "5.104.3",
-		"@tanstack/react-virtual": "3.14.19",
+		"@hookform/resolvers": "6.0.0",
+		"@tanstack/react-query": "5.104.4",
+		"@tanstack/react-virtual": "3.14.21",
 		"class-variance-authority": "0.7.1",
 		"clsx": "2.1.1",
 		"cmdk": "1.1.1",
@@ -66,16 +66,16 @@
 		"drizzle-orm": "0.45.4",
 		"hash-wasm": "4.12.0",
 		"ioredis": "6.0.0",
-		"isomorphic-dompurify": "^4.5.0",
+		"isomorphic-dompurify": "^4.6.0",
 		"jpeg-js": "0.4.4",
 		"jsonc-parser": "3.3.1",
 		"jszip": "3.10.2",
-		"lucide-react": "1.57.0",
+		"lucide-react": "1.59.0",
 		"lzma-wasm": "1.0.7",
-		"motion": "14.2.0",
-		"music-metadata": "12.2.1",
+		"motion": "14.4.0",
+		"music-metadata": "12.2.3",
 		"mysql2": "3.24.6",
-		"next": "16.4.1",
+		"next": "16.4.2",
 		"next-auth": "5.0.0-beta.32",
 		"next-intl": "4.14.9",
 		"otplib": "13.5.0",
@@ -83,7 +83,7 @@
 		"react": "19.3.1",
 		"react-dom": "19.3.1",
 		"react-hook-form": "7.90.0",
-		"resend": "6.33.0",
+		"resend": "6.34.1",
 		"server-only": "0.0.1",
 		"sharp": "^0.35.5",
 		"sonner": "2.0.8",
@@ -92,7 +92,7 @@
 		"zod": "4.6.7"
 	},
 	"devDependencies": {
-		"@axe-core/playwright": "4.13.0",
+		"@axe-core/playwright": "4.14.0",
 		"@babel/parser": "8.0.7",
 		"@biomejs/biome": "2.5.15",
 		"@playwright/test": "1.64.1",
@@ -102,17 +102,17 @@
 		"@types/node": "26.6.5",
 		"@types/react": "19.3.0",
 		"@types/react-dom": "19.3.0",
-		"@vitest/coverage-v8": "5.0.4",
+		"@vitest/coverage-v8": "5.0.5",
 		"drizzle-kit": "0.31.11",
 		"esbuild": "0.28.2",
 		"msw": "^3.0.3",
 		"pino-pretty": "13.2.0",
-		"postcss": "8.5.30",
+		"postcss": "8.5.31",
 		"tailwindcss": "4.3.3",
 		"testcontainers": "12.2.1",
 		"tsx": "4.23.15",
 		"typescript": "7.0.2",
 		"vite": "8.3.4",
-		"vitest": "5.0.4"
+		"vitest": "5.0.5"
 	}
 }
@@ -1,8 +1,24 @@
+import { randomInt } from "node:crypto";
 import { defineConfig } from "@playwright/test";

-const port = Number(process.env.UI_TEST_PORT || 3107);
-if (!Number.isInteger(port) || port < 1024 || port > 65535)
-	throw Error("Invalid UI_TEST_PORT");
+// The fixture server binds a loopback port. The CI runner packs several jobs
+// onto the shared host network (capacity > 1), so a fixed port makes concurrent
+// runs fight over the bind: one wins, the other's browser then gets
+// "connection refused". Pick one random high port for the whole run and pass it
+// to every worker through the environment, unless a port is pinned explicitly
+// (e.g. a developer reusing a manually started fixture server).
+function fixturePort() {
+	const requested = Number(process.env.UI_TEST_PORT);
+	if (Number.isInteger(requested) && requested >= 1024 && requested <= 65535)
+		return requested;
+	const shared = Number(process.env.PW_UI_TEST_PORT);
+	if (Number.isInteger(shared) && shared >= 1024 && shared <= 65535)
+		return shared;
+	const port = randomInt(30000, 50000);
+	process.env.PW_UI_TEST_PORT = String(port);
+	return port;
+}
+const port = fixturePort();
 const baseURL = `http://127.0.0.1:${port}`;
 export default defineConfig({
 	testDir: "./e2e/ui",
@@ -65,7 +81,7 @@ export default defineConfig({
 		command: "node e2e/ui/fixture-server.mjs",
 		url: `${baseURL}/health`,
 		timeout: 120000,
-		reuseExistingServer: true,
+		reuseExistingServer: !process.env.CI,
 		env: { UI_TEST_PORT: String(port) },
 	},
 });
@@ -189,14 +189,14 @@ importers:
        specifier: 3.5.21
        version: 3.5.21
      '@hookform/resolvers':
-        specifier: 5.9.1
-        version: 5.9.1([email protected](@types/[email protected])([email protected]))([email protected])
+        specifier: 6.0.0
+        version: 6.0.0([email protected](@types/[email protected])([email protected]))([email protected])
      '@tanstack/react-query':
-        specifier: 5.104.3
-        version: 5.104.3([email protected])
+        specifier: 5.104.4
+        version: 5.104.4(@types/[email protected])([email protected])
      '@tanstack/react-virtual':
-        specifier: 3.14.19
-        version: 3.14.19([email protected]([email protected]))([email protected])
+        specifier: 3.14.21
+        version: 3.14.21([email protected]([email protected]))([email protected])
      class-variance-authority:
        specifier: 0.7.1
        version: 0.7.1
@@ -219,8 +219,8 @@ importers:
        specifier: 6.0.0
        version: 6.0.0
      isomorphic-dompurify:
-        specifier: ^4.5.0
-        version: 4.5.0(@noble/[email protected])
+        specifier: ^4.6.0
+        version: 4.6.0(@noble/[email protected])
      jpeg-js:
        specifier: 0.4.4
        version: 0.4.4
@@ -231,29 +231,29 @@ importers:
        specifier: 3.10.2
        version: 3.10.2
      lucide-react:
-        specifier: 1.57.0
-        version: 1.57.0(@types/[email protected])([email protected])
+        specifier: 1.59.0
+        version: 1.59.0(@types/[email protected])([email protected])
      lzma-wasm:
        specifier: 1.0.7
        version: 1.0.7
      motion:
-        specifier: 14.2.0
-        version: 14.2.0([email protected]([email protected]))([email protected])
+        specifier: 14.4.0
+        version: 14.4.0([email protected]([email protected]))([email protected])
      music-metadata:
-        specifier: 12.2.1
-        version: 12.2.1
+        specifier: 12.2.3
+        version: 12.2.3
      mysql2:
        specifier: 3.24.6
        version: 3.24.6(@types/[email protected])
      next:
-        specifier: 16.4.1
-        version: 16.4.1(@playwright/[email protected])(@types/[email protected])([email protected]([email protected]))([email protected])
+        specifier: 16.4.2
+        version: 16.4.2(@playwright/[email protected])(@types/[email protected])([email protected]([email protected]))([email protected])
      next-auth:
        specifier: 5.0.0-beta.32
-        version: 5.0.0-beta.32([email protected].1(@playwright/[email protected])(@types/[email protected])([email protected]([email protected]))([email protected]))([email protected])
+        version: 5.0.0-beta.32([email protected].2(@playwright/[email protected])(@types/[email protected])([email protected]([email protected]))([email protected]))([email protected])
      next-intl:
        specifier: 4.14.9
-        version: 4.14.9(@swc/[email protected])(@types/[email protected])([email protected].1(@playwright/[email protected])(@types/[email protected])([email protected]([email protected]))([email protected]))([email protected])
+        version: 4.14.9(@swc/[email protected])(@types/[email protected])([email protected].2(@playwright/[email protected])(@types/[email protected])([email protected]([email protected]))([email protected]))([email protected])
      otplib:
        specifier: 13.5.0
        version: 13.5.0
@@ -270,8 +270,8 @@ importers:
        specifier: 7.90.0
        version: 7.90.0(@types/[email protected])([email protected])
      resend:
-        specifier: 6.33.0
-        version: 6.33.0
+        specifier: 6.34.1
+        version: 6.34.1
      server-only:
        specifier: 0.0.1
        version: 0.0.1
@@ -292,8 +292,8 @@ importers:
        version: 4.6.7
    devDependencies:
      '@axe-core/playwright':
-        specifier: 4.13.0
-        version: 4.13.0([email protected])
+        specifier: 4.14.0
+        version: 4.14.0([email protected])
      '@babel/parser':
        specifier: 8.0.7
        version: 8.0.7
@@ -322,8 +322,8 @@ importers:
        specifier: 19.3.0
        version: 19.3.0(@types/[email protected])
      '@vitest/coverage-v8':
-        specifier: 5.0.4
-        version: 5.0.4([email protected].4)
+        specifier: 5.0.5
+        version: 5.0.5([email protected].5)
      drizzle-kit:
        specifier: 0.31.11
        version: 0.31.11
@@ -337,8 +337,8 @@ importers:
        specifier: 13.2.0
        version: 13.2.0
      postcss:
-        specifier: 8.5.30
-        version: 8.5.30
+        specifier: 8.5.31
+        version: 8.5.31
      tailwindcss:
        specifier: 4.3.3
        version: 4.3.3
@@ -355,8 +355,8 @@ importers:
        specifier: 8.3.4
        version: 8.3.4(@types/[email protected])([email protected])([email protected])([email protected])([email protected])
      vitest:
-        specifier: 5.0.4
-        version: 5.0.4(@types/[email protected])(@vitest/[email protected].4)([email protected](@noble/[email protected]))([email protected](@types/[email protected])([email protected])([email protected](@types/[email protected])([email protected])([email protected])([email protected])([email protected])))([email protected](@types/[email protected])([email protected])([email protected])([email protected])([email protected]))
+        specifier: 5.0.5
+        version: 5.0.5(@types/[email protected])(@vitest/[email protected].5)([email protected](@noble/[email protected]))([email protected](@types/[email protected])([email protected])([email protected](@types/[email protected])([email protected])([email protected])([email protected])([email protected])))([email protected](@types/[email protected])([email protected])([email protected])([email protected])([email protected]))

 packages:

@@ -386,8 +386,9 @@ packages:
      nodemailer:
        optional: true

-  '@axe-core/[email protected]3.0':
-    resolution: {integrity: sha512-6YLx+kxXu5GJceG4ozFg+33a2EMTdjYwWGloJ3sb9Kta5pp+ZNS53uxGVog5JetIY8s++P5UrtX+cri+u0VAVg==}
+  '@axe-core/[email protected]4.0':
+    resolution: {integrity: sha512-SGUhG5PIHd2eMdpgBF2PyQLOhX+qyDR2PT4cmoS4Qk2ak+jX/rrSvst9l0PGv5WTHolKpUMvVmoHpr4cZgf1RQ==}
+    engines: {node: '>=22.12.0'}
    peerDependencies:
      playwright-core: '>= 1.0.0'

@@ -967,8 +968,8 @@ packages:
    engines: {node: '>=6'}
    hasBin: true

-  '@hookform/resolvers@5.9.1':
-    resolution: {integrity: sha512-7b7vsbraJxKgjVSA1Nur9tLwj539WGJUBLA7QNvXnFoT2pM5Z7G+6rlukk4B2/QrTZy6huRtH6wKeESPKuIr6w==}
+  '@hookform/resolvers@6.0.0':
+    resolution: {integrity: sha512-6iBzQnB+YwAveVc8HUi6QYLITn5X+xNKRMFIcNXHZlvp2aTI7yWbj4n/JodXxirMCcBc4VCjb2aYAJh4x07mVw==}
    peerDependencies:
      '@sinclair/typebox': '>=0.25.24'
      '@standard-schema/spec': ^1.0.0
@@ -978,11 +979,11 @@ packages:
      ajv-errors: ^3.0.0
      ajv-formats: ^2.1.1
      arktype: ^2.0.0
-      ata-validator: ^1.2.0
+      ata-validator: ^1.23.0
      class-transformer: '>=0.4.0'
      class-validator: '>=0.12.0'
      computed-types: ^1.0.0
-      effect: ^3.10.3
+      effect: ^4.0.0
      fluentvalidation-ts: ^3.0.0
      fp-ts: ^2.7.0
      io-ts: ^2.0.0
@@ -1278,57 +1279,57 @@ packages:
    resolution: {integrity: sha512-lZBylf8kTt096RGnnVfHq+5w4DTRgmFjf59/IVMPBBwKrViumV1l95LZ/LrWt1LZlsJymHOSnoP8mX/kPXZPWw==}
    engines: {node: '>=22'}

-  '@next/[email protected].1':
-    resolution: {integrity: sha512-5sUUrrSvs/2/2LnLoesybMGx12EtPB46fdZ6RhAw0XDGSPxU2LFyQBB7yuEiOFFJPKmBY6+q2jTr1/AMbnp0/g==}
+  '@next/[email protected].2':
+    resolution: {integrity: sha512-nTUTFH7G5/J/fmpkjVLegOkqyKOP0CEsJcMsyO4UCYeN1su+YMW/MfaSErnJskL7XM+UDK6aTvslxsRCyya/sA==}

-  '@next/[email protected].1':
-    resolution: {integrity: sha512-U+hQ5Gj3fpzf4fveTIF3dpUFYhaSW8vHhdAnbiIomzXzg7boreYFgBqprepXFtW4sw+aTttiNmg0gew/iFNhbg==}
+  '@next/[email protected].2':
+    resolution: {integrity: sha512-ONkhFvZNFWlsEHOM/81AtxdyuJP2KRYKYR0JxPwvcu1AuPMMMgcL+wW2luldJvMtZwKtUxoSkCychW5wIeoYSw==}
    engines: {node: '>= 10'}
    cpu: [arm64]
    os: [darwin]

-  '@next/[email protected].1':
-    resolution: {integrity: sha512-/hqC3V1XLUjhMASf/WridKdO9FXoEgN3HBWmtKbj00MPgnltutfraWJ3bYTpCRIgEIpbjJyOVLpYgAhh/BkdcQ==}
+  '@next/[email protected].2':
+    resolution: {integrity: sha512-luPCMbOsCoaF+kXJEUjmjmOZg1lC3BflhmUu+ZmW4tBu2vW/4AXak8JBFvePizGkxVmNiAw/r9ra+6UviCWtWQ==}
    engines: {node: '>= 10'}
    cpu: [x64]
    os: [darwin]

-  '@next/[email protected].1':
-    resolution: {integrity: sha512-GHzncHbcaS9g95kcvTNtKQW3aCLoR+xc3Jm7qrkpk1R+D2BjMHIPyvQGRPKCdMX95BsH/421jBUK06q9tEwzjw==}
+  '@next/[email protected].2':
+    resolution: {integrity: sha512-xhwFTAncJyaCNy5KqKKuKaIIdCy1/1ZV1s5S1G0hhT7wGMkDTlfJ6aQbfRFnIG/s3/kDrxQ8aycVe+c5QnP8ow==}
    engines: {node: '>= 10'}
    cpu: [arm64]
    os: [linux]
    libc: [glibc]

-  '@next/[email protected].1':
-    resolution: {integrity: sha512-1SuJyDxW/PR9dHJat/ZRgcYLhuSZ+1psP4DlKb2tKIuXbjygqpLrJWRSq+onZQBv8LcmU67EIrmb6c3XTaJLjw==}
+  '@next/[email protected].2':
+    resolution: {integrity: sha512-T1PNmfbPcxr5ndtWUL/3wQtLXsz808lq6sc2GrNT5k2oquF7UyqZddHSuAewHVsWsGXe6nsl9HoN1YNriVjuSg==}
    engines: {node: '>= 10'}
    cpu: [arm64]
    os: [linux]
    libc: [musl]

-  '@next/[email protected].1':
-    resolution: {integrity: sha512-Istng1hMGp9TGO4lUqeKLd70MPN/OOkucVTP2Nmj+gLkwBgmPqUw8CJYBCC7nbl/B/23bBCcjCI5Hsh6hazC1A==}
+  '@next/[email protected].2':
+    resolution: {integrity: sha512-N9cDUOCGtkJG5PNKDFZUF3xXndrJJcpLp121uAGjIGvO/U2p9tfdNOM9htj7+5f72l0m8rMw/cvYacUJBQoudg==}
    engines: {node: '>= 10'}
    cpu: [x64]
    os: [linux]
    libc: [glibc]

-  '@next/[email protected].1':
-    resolution: {integrity: sha512-aSC9wMNiZRRFVpPkPWBzRwLQxIGm/CiQcXyFF1XNcgodb+uMxdk7aSSGGpDXCbnvZdf4itjHxpOd5h7i7zaiYw==}
+  '@next/[email protected].2':
+    resolution: {integrity: sha512-yY2uh1YhX6ufuYy2FCbw1dqblbhI57GLYAJfCkqD9auTv6pLrH67Uccjc3QMKBeCYAG6lkgu08ExmX1bbjejjQ==}
    engines: {node: '>= 10'}
    cpu: [x64]
    os: [linux]
    libc: [musl]

-  '@next/[email protected].1':
-    resolution: {integrity: sha512-t/myvwFDlypMUjRvbBf8qLPyuaB0iXYYdBtwMt6DM6f+60wtGr4bSYholdPqNeV5VUXZhrpMwfza829kmhS3iA==}
+  '@next/[email protected].2':
+    resolution: {integrity: sha512-j/ArWRIHpMMB6wYLMhr2puTguBt70lNU/Cmjl9p6dTDE8DGknYJMP9PdwPk2dqpCNL/KIX9yfngDvIesxJPmsg==}
    engines: {node: '>= 10'}
    cpu: [arm64]
    os: [win32]

-  '@next/[email protected].1':
-    resolution: {integrity: sha512-6ICqPo9awCkrtYNPhwkx1uU7rlFWrZRrIboDHS2LU+jv088UBYQtmJ25h6pCp27/+FZjF6BQ4Te4ErugyMeuBg==}
+  '@next/[email protected].2':
+    resolution: {integrity: sha512-AA4edyWHDko3NCSo0x6GomsdgFb0oR1J3MXU1b5xt6FRFg4AucrMPW3S0hCe/9onU0O1BbpGQBsqo1r0Gneu1g==}
    engines: {node: '>= 10'}
    cpu: [x64]
    os: [win32]
@@ -1952,22 +1953,26 @@ packages:
    peerDependencies:
      tailwindcss: '>=3.0.0 || >=4.0.0 || insiders'

-  '@tanstack/[email protected].3':
-    resolution: {integrity: sha512-DZY9TuJAOgU3UyHUhXb4CcTYEHNZszlwkPg4VViIwTxOKzLprPUU+rbaPZQd3srqkGOtpaDdKpW972UV/LKlcg==}
+  '@tanstack/[email protected].4':
+    resolution: {integrity: sha512-nU4Yrb8Sjn0DeVb7PKG9uiepNavys3yoxy1FX0hViY4/P6Ng/mBje2SMl7i9812rtyHKtHyqiaC/td6GkI8StA==}

-  '@tanstack/[email protected].3':
-    resolution: {integrity: sha512-5Ts1ImwJKqoJgPkLxl9WrPQy1JEoEmti3MaaODCfBamHUGFk57IFrc+AIksPq+BAm10EsroX56qm398Z42LG7w==}
+  '@tanstack/[email protected].4':
+    resolution: {integrity: sha512-YD5QkvUNy8Ey3LbOy2vwL97JjoYycwDv++cWAibTe+9BLYvl3c09XpYp5dZ2VcxcguwoDhGF+utYJYb79RB36w==}
    peerDependencies:
+      '@types/react': ^18 || ^19
      react: ^18 || ^19
+    peerDependenciesMeta:
+      '@types/react':
+        optional: true

-  '@tanstack/[email protected]9':
-    resolution: {integrity: sha512-zmVdJO8DDqHphZ2H6SnTmgpVXcUy5DprB+clZF0ik679/d0MQ1UPEb2jtaX6F5VTAX4o3ozSLQaRCnybS2KYLA==}
+  '@tanstack/[email protected].21':
+    resolution: {integrity: sha512-wWE/ZJDNNDp18JHWy7n5PQooqerHePVkEEu6Op0twKQ2InF9DPhYMQptQY0syDEviMd3/r8D0OUvKJibDGm9HQ==}
    peerDependencies:
      react: ^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0
      react-dom: ^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0

-  '@tanstack/[email protected].4':
-    resolution: {integrity: sha512-ygZ3O99Il18dl0gG0q7sH78iSkb96F07G+xK9V83eCgV8NQbcNd7R+cgcJJMFO7llBoebd0A82sCCstQq2Vp6Q==}
+  '@tanstack/[email protected].6':
+    resolution: {integrity: sha512-CsTW892z23gy7IyxYTTorVu1uZWB+0N349rSMgKz4rFLPpLza7F7TpcCKeI5iUAwYQCt8QUlOU67J+KXCxtpGw==}

  '@tokenizer/[email protected]':
    resolution: {integrity: sha512-56U2O6fDLFtqokwWh597IdeUgtM7j+TT9tb1soybhgA6cy163gAcVmoQr8H4Ud/CkgCkViwcuLyqtn6wYqw59Q==}
@@ -2146,11 +2151,11 @@ packages:
    cpu: [x64]
    os: [win32]

-  '@vitest/[email protected].4':
-    resolution: {integrity: sha512-P5YcQY8Y6RmoE9xRXI38rT8pssbcubEzqtYTM2XQoxOXMDn04nRaTI1SM8qCl9/NfW3ag9GlzdSXu7IwO5Ft8A==}
+  '@vitest/[email protected].5':
+    resolution: {integrity: sha512-4KpkGdIrSqBihx/JyP/e+S+IKB98etg1XDQiLAxksLfcShnwi1VReGeOT9NI43hLHbknosKp/1CCLn9Zgcs8mg==}
    peerDependencies:
-      '@vitest/browser': 5.0.4
-      vitest: 5.0.4
+      '@vitest/browser': 5.0.5
+      vitest: 5.0.5
    peerDependenciesMeta:
      '@vitest/browser':
        optional: true
@@ -2163,8 +2168,8 @@ packages:
    resolution: {integrity: sha512-gUsfXZJbzPamoIY5TvHFiMMoXESBrUMo+xqaj+rYrWI69+EnvRlYBlP96ZnHPY4vX8kyUpgAnFUCg5wZG/HkDQ==}
    engines: {node: '>=22'}

-  '@vitest/[email protected].4':
-    resolution: {integrity: sha512-tqAlrYWce4iUxhr3ncNohejtCTOcHeE8XWrSNZY3OhPoDn01yeGv+gnaBy64ATp7o6pb03eIbBAjzmibpc9vIQ==}
+  '@vitest/[email protected].5':
+    resolution: {integrity: sha512-xLL3lkDegJZw+MGoGaCCsFayDZthGgpAtr3Vziyfc4p7xH89K7KRPcRBBh/kEYm0Aqkt5DtTmkYpBtRV/FrHZg==}
    peerDependencies:
      msw: ^2.4.9 || ^3.0.0
      vite: ^6.0.0 || ^7.0.0 || ^8.0.0
@@ -2174,8 +2179,8 @@ packages:
      vite:
        optional: true

-  '@vitest/[email protected].4':
-    resolution: {integrity: sha512-MZKk/gSkm2q+ICobMxCpH1mA+cCAWm8WV7UhxlqGjq/sJ3AGc1BqFOs5CRVXxH78wQtme9q/NAAgBquj4AcyMw==}
+  '@vitest/[email protected].5':
+    resolution: {integrity: sha512-lwJRExuH417257Q5wv9QYugN9IMJkoxcrKrYxGPQkBzl7wlNpTUxD/5yNX4ESKVUIShKPgkGchYPFMWOOk0wzw==}

  [email protected]:
    resolution: {integrity: sha512-h8lQ8tacZYnR3vNQTgibj+tODHI5/+l06Au2Pcriv/Gmet0eaj4TwWH41sO9wnHDiQsEj19q0drzdWdeAHtweg==}
@@ -2233,8 +2238,8 @@ packages:
    resolution: {integrity: sha512-NZKeq9AfyQvEeNlN0zSYAaWrmBffJh3IELMZfRpJVWgrpEbtEpnjvzqBPf+mxoI287JohRDoa+/nsfqqiZmF6g==}
    engines: {node: '>= 6.0.0'}

-  [email protected]3.0:
-    resolution: {integrity: sha512-UzGt8zg7Ny8djbYMhxl2zuEevVa7r2gJjYY5Lwr1xM7+XU2nd6CkIWFTVcCIbAP63vSz71NaVyyuSk9lHKcy0A==}
+  [email protected]4.0:
+    resolution: {integrity: sha512-9WTZxEjsZ7b13TH8JPmbV2z8CHbl80/2hm3XPEG4JgNdQLK81IBRXmSxHfMAOkSqQeRxT/0dwNDz2GOm3zzpcQ==}
    engines: {node: '>=4'}

  [email protected]:
@@ -2669,8 +2674,8 @@ packages:
    resolution: {integrity: sha512-gIXjKqtFuWEgzFRJA9WCQeSJLZDjgJUOMCMzxtvFq/37KojM1BFGufqsCy0r4qSQmYLsZYMeyRqzIWOMup03sw==}
    engines: {node: '>=14'}

-  framer-motion@14.2.0:
-    resolution: {integrity: sha512-cD2gfFujHt4r/+dZpcn5yziu7VRwQAQDakwIm/bICYXbafnpHCYokV+PnEXqErnSdv6Eh28a+SRF+f3ndGcMsQ==}
+  framer-motion@14.4.0:
+    resolution: {integrity: sha512-HtO1fxord2rnXYRyr1laG4uY7+OtgwDc9Szcg1wlMq/LF7BO3/S7a+KEo691U7pSi+i0ueRuRqaD1UaLEmZHuQ==}
    peerDependencies:
      react: ^18.0.0 || ^19.0.0
      react-dom: ^18.0.0 || ^19.0.0
@@ -2783,8 +2788,8 @@ packages:
  [email protected]:
    resolution: {integrity: sha512-RHxMLp9lnKHGHRng9QFhRCMbYAcVpn69smSGcq3f36xjgVVWThj4qqLbTLlq7Ssj8B+fIQ1EuCEGI2lKsyQeIw==}

-  isomorphic-dompurify@4.5.0:
-    resolution: {integrity: sha512-5bUPydvGp1pJx27Cff7ScHsgJkETjliiSqpQjPZHMBO6hgqZem38qsXF4TkUYu83yBlbb3rYhypgoo6mMvz48w==}
+  isomorphic-dompurify@4.6.0:
+    resolution: {integrity: sha512-ZLYxxq2efNUsaUMViQXML/HMBkaJSd8WAFcNJQfWOGi+KLGQyZA8Ewpcj7yWur6KzMHlrZNXTXr8trbx/bkZRw==}
    engines: {node: ^22.22.2 || ^24.15.0 || >=26.0.0}

  [email protected]:
@@ -2995,8 +3000,8 @@ packages:
    resolution: {integrity: sha512-5J9ysMYUpYIg9RF2vJpy9SinEmSviFSe0GyPpCQ4L5QSkLAgeLXlTAOu2ZwWUU5m+0SBl6gUU1R1ZQB3aKypfA==}
    engines: {bun: '>=1.0.0', deno: '>=1.30.0', node: '>=8.0.0'}

-  [email protected]7.0:
-    resolution: {integrity: sha512-bXFZEucYhAzLD62Jse76AbTR6LiSLTn3Tqir2f1n8rZrWAdLodYy7jnRZSPIT89dRLk/IseMOUWG82wJtTyTTw==}
+  [email protected]9.0:
+    resolution: {integrity: sha512-5qgMyyCPU6OvnKpLS2t693+ZtiqA8oaSweWoUows0BLFKFf6V75m4+CptpmohZHpD5IuOVIBXHBBiv2vpLJmtw==}
    peerDependencies:
      '@types/react': '*'
      react: ^16.5.1 || ^17.0.0 || ^18.0.0 || ^19.0.0
@@ -3051,14 +3056,14 @@ packages:
    engines: {node: '>=10'}
    hasBin: true

-  motion-dom@14.2.0:
-    resolution: {integrity: sha512-TDdxnjAavh2Qm4lQCQI3uoTx9IR/Id2PI8JNEXW3AcwwV2yvhoimAX3/TnE+x82gDHfPq2yx/cJ58TTw5mMr0A==}
+  motion-dom@14.4.0:
+    resolution: {integrity: sha512-1q8RyHSdr5COpzrv3JgJ9XRjOO88ZN9CwflpkGgyO/SR/SNRP/dD6EU8SEo092kcKY34IzHC5diJPKrQRMA8lQ==}

  [email protected]:
    resolution: {integrity: sha512-3VvN5Uvf8B6qG+OfOui6Nht5EWp+vLuU3IqcAj7ItZGKqtmTjCebl5sGZF7/08gEHRnEl1AP/fIwbcEyVrcQGQ==}

-  motion@14.2.0:
-    resolution: {integrity: sha512-45cDwjZh0yOMZtnX3hIFPIPmzCWz/RC2bD/niWVIssGBjJlMmosbDILG9a+ZyoP635Z5xrbKvuo10spv9dBdnw==}
+  motion@14.4.0:
+    resolution: {integrity: sha512-JJTIdeNjtF2zi/py0ndRKxQF+8z2pcDUgJYXul7zqbhMvyTLRsPFR9ifE/j4cFCpCMlehQVJkTwd7BZFiPKgQg==}
    peerDependencies:
      react: ^18.0.0 || ^19.0.0
      react-dom: ^18.0.0 || ^19.0.0
@@ -3087,8 +3092,8 @@ packages:
      vite:
        optional: true

-  [email protected].1:
-    resolution: {integrity: sha512-JB/bnmQAa8HiKHuIg9dupGFjCKpdsocm9nJrTQe31f5zTaKfJmTwJwOvH1yVL91/jwFNKTOAOIPrHo3L5XwGfQ==}
+  [email protected].3:
+    resolution: {integrity: sha512-YN0oQcaIhXyIW8lmmjErhegZhqpyO325oQu9ZjtOFXb/QfwgGjxpzIQUmEGHBpLlrCix42OmrlvUZFkfv+Eecw==}
    engines: {node: '>=22'}

  [email protected]:
@@ -3146,8 +3151,8 @@ packages:
      '@types/react':
        optional: true

-  [email protected].1:
-    resolution: {integrity: sha512-uc657V62E34fOI6W5NtG9IzwsPcms0Z60grz2MJGtglgD+pTFnNt4Yw2PzaU622tfX4vhrDgLZzicE2YlhI20Q==}
+  [email protected].2:
+    resolution: {integrity: sha512-r+oBJojfefUjOiWkBhXgLS+igxX/7BWyK59uHnyOyplMSLtBZ+QLP3okrdYTbrfrbrmNTVWLBPaHDX9KRaIt3w==}
    engines: {node: '>=20.9.0'}
    hasBin: true
    peerDependencies:
@@ -3256,8 +3261,8 @@ packages:
    resolution: {integrity: sha512-g50586zr4bZmwFiTlflMu8E0bDTb5I5gertgwAKmsdUlTQIhZtunzUlD1WSzwcVWPoAVpsrA6vlfCD7oXvRwgg==}
    engines: {node: ^10 || ^12 || >=14}

-  [email protected]0:
-    resolution: {integrity: sha512-zkd+e9S1AQHhmaBKye9zlFHWjOwVgqXl1q3ECYy8561K7qxR2cREf/STLskulBFd78k6AOFeA+ff1TtEzk9bAA==}
+  [email protected]1:
+    resolution: {integrity: sha512-YUbWYCgErwnMAVkjUnYa+KlMBzGpHwiIt/DE7f0G33AuX2LH9UcTk6KgWxd3zRU+pN3u/C+Xl3EnMLM4Hea7Sg==}
    engines: {node: ^10 || ^12 || >=14}

  [email protected]:
@@ -3380,8 +3385,8 @@ packages:
  [email protected]:
    resolution: {integrity: sha512-XGoLeRAVzUTcJ1qkxPQhDJyIZ5d6zzZD9nT7AEZOaaU9UbWclhycElmhO+VD5bFeLuzhPBaOV2oXC8uG35ZSpg==}

-  [email protected]3.0:
-    resolution: {integrity: sha512-sbpWLrwlaIDZuGHRYNX6101CWtXLqRNcT1S9c8BB357Ab2+IUJ7dNpYffVmGh2C11/4AfcFvM4ltURH8NJlPGw==}
+  [email protected]4.1:
+    resolution: {integrity: sha512-3jo/j1WAW7CBkE6pzK4qLjZCfHRLIhY3ph3x/wzU+MN51cSw3EtReGce8S1cA1R0ipNDOdFYU5Lmt5r563lvYw==}
    engines: {node: '>=20'}
    peerDependencies:
      '@react-email/render': '*'
@@ -3542,8 +3547,8 @@ packages:
    resolution: {integrity: sha512-1tB5mhVo7U+ETBKNf92xT4hrQa3pm0MZ0PQvuDnWgAAGHDsfp4lPSpiS6psrSiet87wyGPh9ft6wmhOMQ0hDiw==}
    engines: {node: '>=14.16'}

-  strtok3@10.5.0:
-    resolution: {integrity: sha512-PgAsgIuizbZN/r4+g4UNvbVCTpJWdoIdI71kIWwKmdIH0vJ0q7ylMVGU8PWj2s9O98y4MtFWiDTIrtNukZMMgQ==}
+  strtok3@10.6.2:
+    resolution: {integrity: sha512-BkdixFFUt7r7LsX6aGNPVyYMLjW+M1USLlKPNbZsrZEmLFh5tGqhdfckKo6xgsZIJqdDD0CZGkeCJJwNWQIKQA==}
    engines: {node: '>=18'}

  [email protected]:
@@ -3759,20 +3764,20 @@ packages:
      yaml:
        optional: true

-  [email protected].4:
-    resolution: {integrity: sha512-z0WxZRV2Sg48wF0FSgMq3TFG8JS38/Qr96vZVZdX6+Em9raQTvnXQvdTFJe2m3rfyJnEHeHQ/snceIdi8D1pVg==}
+  [email protected].5:
+    resolution: {integrity: sha512-cPODOMF8YnkiiYtDdHo6n4wWmBrOBBbOIYH2d33M4l3CdNn72h+qMmO6uXffUN6A5AZFXNND/d+krS9mgkXRfg==}
    engines: {node: ^22.12.0 || ^24.0.0 || >=26.0.0}
    hasBin: true
    peerDependencies:
      '@edge-runtime/vm': '*'
      '@opentelemetry/api': ^1.9.0
      '@types/node': ^22.0.0 || >=24.0.0
-      '@vitest/browser-playwright': 5.0.4
-      '@vitest/browser-preview': 5.0.4
+      '@vitest/browser-playwright': 5.0.5
+      '@vitest/browser-preview': 5.0.5
      '@vitest/browser-webdriverio': ^5.0.0-beta.5 || >=5.0.0
-      '@vitest/coverage-istanbul': 5.0.4
-      '@vitest/coverage-v8': 5.0.4
-      '@vitest/ui': 5.0.4
+      '@vitest/coverage-istanbul': 5.0.5
+      '@vitest/coverage-v8': 5.0.5
+      '@vitest/ui': 5.0.5
      happy-dom: '*'
      jsdom: '*'
      vite: ^6.4.0 || ^7.0.0 || ^8.0.0
@@ -3906,9 +3911,9 @@ snapshots:
      preact: 10.24.3
      preact-render-to-string: 6.5.11([email protected])

-  '@axe-core/[email protected]3.0([email protected])':
+  '@axe-core/[email protected]4.0([email protected])':
    dependencies:
-      axe-core: 4.13.0
+      axe-core: 4.14.0
      playwright-core: 1.64.1

  '@babel/[email protected]': {}
@@ -4288,7 +4293,7 @@ snapshots:
      protobufjs: 7.6.6
      yargs: 17.7.3

-  '@hookform/resolvers@5.9.1([email protected](@types/[email protected])([email protected]))([email protected])':
+  '@hookform/resolvers@6.0.0([email protected](@types/[email protected])([email protected]))([email protected])':
    dependencies:
      '@standard-schema/utils': 0.3.0
      react-hook-form: 7.90.0(@types/[email protected])([email protected])
@@ -4472,30 +4477,30 @@ snapshots:
    transitivePeerDependencies:
      - supports-color

-  '@next/[email protected].1': {}
+  '@next/[email protected].2': {}

-  '@next/[email protected].1':
+  '@next/[email protected].2':
    optional: true

-  '@next/[email protected].1':
+  '@next/[email protected].2':
    optional: true

-  '@next/[email protected].1':
+  '@next/[email protected].2':
    optional: true

-  '@next/[email protected].1':
+  '@next/[email protected].2':
    optional: true

-  '@next/[email protected].1':
+  '@next/[email protected].2':
    optional: true

-  '@next/[email protected].1':
+  '@next/[email protected].2':
    optional: true

-  '@next/[email protected].1':
+  '@next/[email protected].2':
    optional: true

-  '@next/[email protected].1':
+  '@next/[email protected].2':
    optional: true

  '@noble/[email protected]': {}
@@ -4944,7 +4949,7 @@ snapshots:
      '@alloc/quick-lru': 5.3.0
      '@tailwindcss/node': 4.3.3
      '@tailwindcss/oxide': 4.3.3
-      postcss: 8.5.30
+      postcss: 8.5.31
      tailwindcss: 4.3.3

  '@tailwindcss/[email protected]([email protected])':
@@ -4952,20 +4957,22 @@ snapshots:
      postcss-selector-parser: 7.1.6
      tailwindcss: 4.3.3

-  '@tanstack/[email protected].3': {}
+  '@tanstack/[email protected].4': {}

-  '@tanstack/[email protected].3([email protected])':
+  '@tanstack/[email protected].4(@types/[email protected])([email protected])':
    dependencies:
-      '@tanstack/query-core': 5.104.3
+      '@tanstack/query-core': 5.104.4
      react: 19.3.1
+    optionalDependencies:
+      '@types/react': 19.3.0

-  '@tanstack/[email protected]9([email protected]([email protected]))([email protected])':
+  '@tanstack/[email protected].21([email protected]([email protected]))([email protected])':
    dependencies:
-      '@tanstack/virtual-core': 3.19.4
+      '@tanstack/virtual-core': 3.19.6
      react: 19.3.1
      react-dom: 19.3.1([email protected])

-  '@tanstack/[email protected].4': {}
+  '@tanstack/[email protected].6': {}

  '@tokenizer/[email protected]':
    dependencies:
@@ -5098,7 +5105,7 @@ snapshots:
  '@typescript/[email protected]':
    optional: true

-  '@vitest/[email protected].4([email protected].4)':
+  '@vitest/[email protected].5([email protected].5)':
    dependencies:
      '@bcoe/v8-coverage': 1.0.2
      '@vitest/istanbul-lib-coverage': 1.0.2
@@ -5108,7 +5115,7 @@ snapshots:
      obug: 3.0.0
      std-env: 4.3.0
      tinyrainbow: 3.2.0
-      vitest: 5.0.4(@types/[email protected])(@vitest/[email protected].4)([email protected](@noble/[email protected]))([email protected](@types/[email protected])([email protected])([email protected](@types/[email protected])([email protected])([email protected])([email protected])([email protected])))([email protected](@types/[email protected])([email protected])([email protected])([email protected])([email protected]))
+      vitest: 5.0.5(@types/[email protected])(@vitest/[email protected].5)([email protected](@noble/[email protected]))([email protected](@types/[email protected])([email protected])([email protected](@types/[email protected])([email protected])([email protected])([email protected])([email protected])))([email protected](@types/[email protected])([email protected])([email protected])([email protected])([email protected]))

  '@vitest/[email protected]': {}

@@ -5116,17 +5123,17 @@ snapshots:
    dependencies:
      '@vitest/istanbul-lib-coverage': 1.0.2

-  '@vitest/[email protected].4([email protected](@types/[email protected])([email protected])([email protected](@types/[email protected])([email protected])([email protected])([email protected])([email protected])))([email protected](@types/[email protected])([email protected])([email protected])([email protected])([email protected]))':
+  '@vitest/[email protected].5([email protected](@types/[email protected])([email protected])([email protected](@types/[email protected])([email protected])([email protected])([email protected])([email protected])))([email protected](@types/[email protected])([email protected])([email protected])([email protected])([email protected]))':
    dependencies:
      '@jridgewell/trace-mapping': 0.3.31
-      '@vitest/spy': 5.0.4
+      '@vitest/spy': 5.0.5
      estree-walker: 3.0.3
      magic-string: 1.4.3
    optionalDependencies:
      msw: 3.0.3(@types/[email protected])([email protected])([email protected](@types/[email protected])([email protected])([email protected])([email protected])([email protected]))
      vite: 8.3.4(@types/[email protected])([email protected])([email protected])([email protected])([email protected])

-  '@vitest/[email protected].4': {}
+  '@vitest/[email protected].5': {}

  [email protected]:
    dependencies:
@@ -5190,7 +5197,7 @@ snapshots:

  [email protected]: {}

-  [email protected]3.0: {}
+  [email protected]4.0: {}

  [email protected]: {}

@@ -5544,7 +5551,7 @@ snapshots:
  [email protected]:
    dependencies:
      '@tokenizer/inflate': 0.5.1
-      strtok3: 10.5.0
+      strtok3: 10.6.2
      token-types: 6.1.2
      uint8array-extras: 1.6.0
    transitivePeerDependencies:
@@ -5555,9 +5562,9 @@ snapshots:
      cross-spawn: 7.0.6
      signal-exit: 4.1.0

-  framer-motion@14.2.0([email protected]([email protected]))([email protected]):
+  framer-motion@14.4.0([email protected]([email protected]))([email protected]):
    dependencies:
-      motion-dom: 14.2.0
+      motion-dom: 14.4.0
      motion-utils: 14.1.1
      tslib: 2.8.1
    optionalDependencies:
@@ -5657,7 +5664,7 @@ snapshots:

  [email protected]: {}

-  isomorphic-dompurify@4.5.0(@noble/[email protected]):
+  isomorphic-dompurify@4.6.0(@noble/[email protected]):
    dependencies:
      dompurify: 3.4.17
      jsdom: 30.1.3(@noble/[email protected])
@@ -5829,7 +5836,7 @@ snapshots:

  [email protected]: {}

-  [email protected]7.0(@types/[email protected])([email protected]):
+  [email protected]9.0(@types/[email protected])([email protected]):
    dependencies:
      react: 19.3.1
    optionalDependencies:
@@ -5873,15 +5880,15 @@ snapshots:

  [email protected]: {}

-  motion-dom@14.2.0:
+  motion-dom@14.4.0:
    dependencies:
      motion-utils: 14.1.1

  [email protected]: {}

-  motion@14.2.0([email protected]([email protected]))([email protected]):
+  motion@14.4.0([email protected]([email protected]))([email protected]):
    dependencies:
-      framer-motion: 14.2.0([email protected]([email protected]))([email protected])
+      framer-motion: 14.4.0([email protected]([email protected]))([email protected])
      tslib: 2.8.1
    optionalDependencies:
      react: 19.3.1
@@ -5910,7 +5917,7 @@ snapshots:
      - '@types/node'
      - supports-color

-  [email protected].1:
+  [email protected].3:
    dependencies:
      '@borewit/text-codec': 0.2.2
      '@tokenizer/token': 0.3.0
@@ -5918,7 +5925,7 @@ snapshots:
      debug: 4.4.3
      file-type: 22.2.0
      media-typer: 2.0.0
-      strtok3: 10.5.0
+      strtok3: 10.6.2
      token-types: 6.1.2
      uint8array-extras: 1.6.0
      win-guid: 0.2.1
@@ -5951,15 +5958,15 @@ snapshots:
    dependencies:
      content-type: 2.1.0

-  [email protected]([email protected].1(@playwright/[email protected])(@types/[email protected])([email protected]([email protected]))([email protected]))([email protected]):
+  [email protected]([email protected].2(@playwright/[email protected])(@types/[email protected])([email protected]([email protected]))([email protected]))([email protected]):
    dependencies:
      '@auth/core': 0.41.3
-      next: 16.4.1(@playwright/[email protected])(@types/[email protected])([email protected]([email protected]))([email protected])
+      next: 16.4.2(@playwright/[email protected])(@types/[email protected])([email protected]([email protected]))([email protected])
      react: 19.3.1

  [email protected]: {}

-  [email protected](@swc/[email protected])(@types/[email protected])([email protected].1(@playwright/[email protected])(@types/[email protected])([email protected]([email protected]))([email protected]))([email protected]):
+  [email protected](@swc/[email protected])(@types/[email protected])([email protected].2(@playwright/[email protected])(@types/[email protected])([email protected]([email protected]))([email protected]))([email protected]):
    dependencies:
      '@eloqnt/config': 0.1.1
      '@eloqnt/format-json': 0.1.0
@@ -5969,7 +5976,7 @@ snapshots:
      '@swc/core': 1.16.18(@swc/[email protected])
      icu-minify: 4.14.9
      negotiator: 1.1.0
-      next: 16.4.1(@playwright/[email protected])(@types/[email protected])([email protected]([email protected]))([email protected])
+      next: 16.4.2(@playwright/[email protected])(@types/[email protected])([email protected]([email protected]))([email protected])
      next-intl-swc-plugin-extractor: 4.14.9
      react: 19.3.1
      use-intl: 4.14.9(@types/[email protected])([email protected])
@@ -5978,9 +5985,9 @@ snapshots:
    transitivePeerDependencies:
      - '@swc/helpers'

-  [email protected].1(@playwright/[email protected])(@types/[email protected])([email protected]([email protected]))([email protected]):
+  [email protected].2(@playwright/[email protected])(@types/[email protected])([email protected]([email protected]))([email protected]):
    dependencies:
-      '@next/env': 16.4.1
+      '@next/env': 16.4.2
      '@swc/helpers': 0.5.23
      baseline-browser-mapping: 2.11.28
      caniuse-lite: 1.0.30001816
@@ -5989,14 +5996,14 @@ snapshots:
      react-dom: 19.3.1([email protected])
      styled-jsx: 5.1.6([email protected])
    optionalDependencies:
-      '@next/swc-darwin-arm64': 16.4.1
-      '@next/swc-darwin-x64': 16.4.1
-      '@next/swc-linux-arm64-gnu': 16.4.1
-      '@next/swc-linux-arm64-musl': 16.4.1
-      '@next/swc-linux-x64-gnu': 16.4.1
-      '@next/swc-linux-x64-musl': 16.4.1
-      '@next/swc-win32-arm64-msvc': 16.4.1
-      '@next/swc-win32-x64-msvc': 16.4.1
+      '@next/swc-darwin-arm64': 16.4.2
+      '@next/swc-darwin-x64': 16.4.2
+      '@next/swc-linux-arm64-gnu': 16.4.2
+      '@next/swc-linux-arm64-musl': 16.4.2
+      '@next/swc-linux-x64-gnu': 16.4.2
+      '@next/swc-linux-x64-musl': 16.4.2
+      '@next/swc-win32-arm64-msvc': 16.4.2
+      '@next/swc-win32-x64-msvc': 16.4.2
      '@playwright/test': 1.64.1
      sharp: 0.35.5(@types/[email protected])
    transitivePeerDependencies:
@@ -6105,7 +6112,7 @@ snapshots:
      picocolors: 1.1.1
      source-map-js: 1.2.2

-  [email protected]0:
+  [email protected]1:
    dependencies:
      nanoid: 3.3.20
      picocolors: 1.1.1
@@ -6237,7 +6244,7 @@ snapshots:

  [email protected]: {}

-  [email protected]3.0:
+  [email protected]4.1:
    dependencies:
      postal-mime: 2.7.6
      standardwebhooks: 1.1.1
@@ -6423,7 +6430,7 @@ snapshots:

  [email protected]: {}

-  strtok3@10.5.0:
+  strtok3@10.6.2:
    dependencies:
      '@tokenizer/token': 0.3.0

@@ -6635,7 +6642,7 @@ snapshots:
    dependencies:
      lightningcss: 1.33.0
      picomatch: 4.0.7
-      postcss: 8.5.30
+      postcss: 8.5.31
      rolldown: 1.2.14
      tinyglobby: 0.2.17
    optionalDependencies:
@@ -6646,10 +6653,10 @@ snapshots:
      tsx: 4.23.15
      yaml: 2.9.1

-  [email protected].4(@types/[email protected])(@vitest/[email protected].4)([email protected](@noble/[email protected]))([email protected](@types/[email protected])([email protected])([email protected](@types/[email protected])([email protected])([email protected])([email protected])([email protected])))([email protected](@types/[email protected])([email protected])([email protected])([email protected])([email protected])):
+  [email protected].5(@types/[email protected])(@vitest/[email protected].5)([email protected](@noble/[email protected]))([email protected](@types/[email protected])([email protected])([email protected](@types/[email protected])([email protected])([email protected])([email protected])([email protected])))([email protected](@types/[email protected])([email protected])([email protected])([email protected])([email protected])):
    dependencies:
      '@types/chai': 5.2.3
-      '@vitest/mocker': 5.0.4([email protected](@types/[email protected])([email protected])([email protected](@types/[email protected])([email protected])([email protected])([email protected])([email protected])))([email protected](@types/[email protected])([email protected])([email protected])([email protected])([email protected]))
+      '@vitest/mocker': 5.0.5([email protected](@types/[email protected])([email protected])([email protected](@types/[email protected])([email protected])([email protected])([email protected])([email protected])))([email protected](@types/[email protected])([email protected])([email protected])([email protected])([email protected]))
      chai: 6.3.0
      es-module-lexer: 2.3.2
      expect-type: 1.4.0
@@ -6664,7 +6671,7 @@ snapshots:
      why-is-node-running: 3.2.1
    optionalDependencies:
      '@types/node': 26.6.5
-      '@vitest/coverage-v8': 5.0.4([email protected].4)
+      '@vitest/coverage-v8': 5.0.5([email protected].5)
      jsdom: 30.1.3(@noble/[email protected])
    transitivePeerDependencies:
      - msw
@@ -18,7 +18,7 @@ const hasCompose =
 	}).status === 0;

 it.skipIf(!hasCompose)(
-	"loads the loopback profile from .env for bare Compose commands without changing mounts or host networking",
+	"loads the loopback override from .env for the cms service without changing mounts or host networking",
 	() => {
 		const directory = mkdtempSync(path.join(tmpdir(), "cms-proxy-config-"));
 		try {
@@ -50,9 +50,12 @@ it.skipIf(!hasCompose)(
 					["CMS_RELEASE", "HOSTNAME", "PORT"].includes(key)
 				)
 					delete environment[key];
+			// `cms` is behind the `cms` profile so a bare `docker compose up -d`
+			// can never squat port 3002 on a CI-managed host. Selecting the
+			// profile here keeps the loopback/port-override contract under test.
 			const result = spawnSync(
 				"docker",
-				["compose", "config", "--format", "json"],
+				["compose", "--profile", "cms", "config", "--format", "json"],
 				{ cwd: directory, env: environment, encoding: "utf8", timeout: 15_000 },
 			);
 			expect(result.status, result.stderr).toBe(0);
@@ -47,6 +47,17 @@ it("passes a compiled release to both the application build and final image", ()
 	expect(compose).toContain("NEXT_DEPLOYMENT_ID: ${CMS_RELEASE:-unknown}");
 });

+it("keeps the compose CMS opt-in and inside the 2 GB limit", () => {
+	const compose = readFileSync("docker-compose.yml", "utf8");
+	// A bare `docker compose up -d` starts only byparr. On a CI-managed host the
+	// CMS owns port 3002 through ci-deploy.sh; letting compose claim the same
+	// port again produces an endless EADDRINUSE crash loop.
+	expect(compose).toContain('profiles: ["cms"]');
+	expect(compose).not.toContain("cms-green");
+	expect(compose).toContain("mem_limit: 2g");
+	expect(compose).toContain("memswap_limit: 2g");
+});
+
 it("builds with fixtures and excludes installation secrets from every stage", () => {
 	const ignored = readFileSync(".dockerignore", "utf8");
 	expect(ignored).toMatch(/^\.env$/m);
Author	SHA1	Message	Date
openhands	1e81cac504	test(ui): isolate the fixture port so parallel runs stop colliding CI / check (push) Successful in 29s Details CI / tests-imaging-browsers (push) Successful in 1m37s Details CI / tests-unit (push) Successful in 2m4s Details CI / tests-integration (push) Successful in 2m12s Details CI / tests-quality (push) Successful in 55s Details CI / tests-ui (push) Successful in 4m31s Details CI / preflight (push) Skipped Details CI / deploy (push) Successful in 3m39s Details The self-hosted CI runner packs several jobs onto the shared host network (capacity 4). The UI suite pinned the fixture server to 127.0.0.1:3107 and set reuseExistingServer: true, so overlapping runs fought over the bind: one job won it, and every browser in the other got "connection refused" on all four projects. Pass one random high port per run through the environment (shared by the main process and its worker) and only reuse an existing server outside CI. Verified with the full ui suite: 150 passed, 2 skipped.	2026-10-19 20:16:28 +02:00
openhands	3bc218ba16	chore(deps): dedupe the lockfile to the newest transitive versions CI / check (push) Successful in 33s Details CI / tests-integration (push) Successful in 1m58s Details CI / tests-unit (push) Successful in 2m6s Details CI / tests-quality (push) Successful in 52s Details CI / tests-imaging-browsers (push) Successful in 1m5s Details CI / tests-ui (push) Failing after 6m11s Details CI / preflight (push) Skipped Details CI / deploy (push) Skipped Details `pnpm dedupe --check` still flagged strtok3 10.5.0 (via file-type 22.2.0) against the 10.6.2 already in the graph. Collapse it so the lockfile resolves every transitive dependency to the highest version its parents allow; the check is now clean and the full unit suite still passes.	2026-10-19 19:55:41 +02:00
openhands	61f4db2a00	chore(deps): update dependencies to the latest releases CI / check (push) Successful in 28s Details CI / tests-imaging-browsers (push) Successful in 1m42s Details CI / tests-integration (push) Successful in 2m30s Details CI / tests-unit (push) Successful in 2m55s Details CI / tests-quality (push) Successful in 1m20s Details CI / tests-ui (push) Successful in 6m1s Details CI / preflight (push) Skipped Details CI / deploy (push) Successful in 21s Details Bump every direct dependency to the newest published version, including the @hookform/resolvers 5 -> 6 major. The zodResolver API used by the admin room and user edit forms is unchanged, and typecheck plus the full unit suite pass on the new resolver. Highlights: next 16.4.2, react-query 5.104.4, react-virtual 3.14.21, motion 14.4.0, lucide-react 1.59.0, isomorphic-dompurify 4.6.0, resend 6.34.1, music-metadata 12.2.3, vitest / coverage-v8 5.0.5, postcss 8.5.31 and @axe-core/playwright 4.14.0. README core-stack versions are re-synced.	2026-10-19 19:52:08 +02:00
openhands	597287fce5	fix(compose): keep the CMS opt-in so it cannot claim the CI port CI / check (push) Successful in 36s Details CI / tests-imaging-browsers (push) Successful in 1m49s Details CI / tests-integration (push) Successful in 1m59s Details CI / tests-unit (push) Successful in 2m4s Details CI / tests-quality (push) Successful in 42s Details CI / tests-ui (push) Successful in 4m39s Details CI / preflight (push) Skipped Details CI / deploy (push) Successful in 3m20s Details On a CI-managed host scripts/ci-deploy.sh owns port 3002 through the blue/green slots, so a compose replica of the cms service could only ever crash-loop on EADDRINUSE — it never serves traffic, because nginx points at a slot container. Gate the service behind the `cms` profile so a bare `docker compose up -d` starts only byparr. Naming the service explicitly (`docker compose up -d cms`, which is what the installer and updater already do) still enables the profile automatically, so the compose-only install path keeps working. Keep the one port that is actually served (3002) and make the 2 GB ceiling hard by capping swap at 2g as well. Drop the green compose service (3003): the green slot only ever exists as a docker run container created by CI, so compose no longer defines it and the two paths cannot drift apart. The loopback override contract stays covered: proxy-config.test.mjs now renders the configuration with --profile cms, and a new build-contract test pins the profile and the memory limits so neither can be dropped by accident.	2026-10-19 19:00:07 +02:00